Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa
File:                     c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa (raw, json)
Hash identifier:          vjZlHb31O8nz1hpDmSIxHWT19s79V/fzT9a+QTL9q+0=
Subject key identifier:   48:DB:64:3F:EC:C7:12:FB:ED:D8:47:B2:1D:B9:60:5E:8D:94:83:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DFD8A0CD62D3035999F7B5A044F977D3C441EF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa
Signing time:             Sat 14 Feb 2026 00:50:09 +0000
ROA not before:           Sat 14 Feb 2026 00:50:09 +0000
ROA not after:            Fri 15 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.17.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fd:8a:0c:d6:2d:30:35:99:9f:7b:5a:04:4f:97:7d:3c:44:1e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 14 00:50:09 2026 GMT
            Not After : May 15 23:59:59 2026 GMT
        Subject: serialNumber=b3178f2d700a6ac1baef1b323f1045feb2addf5331144690f006fd0aedbc48b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:59:4f:7d:13:0d:dd:2d:49:7f:18:d6:a3:
                    1c:70:f3:c8:b8:2c:c4:a9:b5:b2:6a:8e:f5:83:a0:
                    24:ce:d0:2a:25:48:ba:f7:0d:eb:5b:a2:f2:80:05:
                    2e:6b:77:39:b3:8c:a7:b8:d4:9b:e7:76:20:ea:fd:
                    76:a4:ef:ea:43:a1:84:9b:a1:d9:4c:a2:81:0a:95:
                    fe:0b:0a:32:7d:e5:bb:8e:99:ee:ea:da:91:0a:b7:
                    6b:2c:25:78:9b:27:a1:db:59:e5:ee:38:e2:7c:bd:
                    51:fe:f7:52:25:84:e6:72:69:8d:5e:7a:bd:7b:d9:
                    ae:e4:dd:16:2a:40:8b:e1:ed:3f:d0:d8:e9:e7:56:
                    44:9d:36:3b:ba:67:48:0d:c0:5f:b4:ea:e2:4b:7b:
                    2a:e3:c4:df:e4:35:8e:32:6c:2d:a6:ee:19:3e:b7:
                    64:7b:07:47:c7:ec:15:2d:09:ad:15:6b:53:1a:12:
                    f6:b8:ab:a6:53:2c:f3:7f:96:f8:75:76:7f:8c:cd:
                    7c:4c:b3:ff:dc:8c:ec:cb:4d:72:c0:ad:0e:d6:4a:
                    12:a0:1c:da:ba:71:d5:1a:f9:1c:27:76:98:f2:59:
                    84:4d:bc:df:45:97:c7:3b:e1:a9:06:e4:f2:9d:aa:
                    57:4c:15:35:14:c8:1f:d4:7a:4d:e4:fb:f6:ee:be:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:64:3F:EC:C7:12:FB:ED:D8:47:B2:1D:B9:60:5E:8D:94:83:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.17.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:05:31:57:a4:4c:94:a1:d7:51:16:9f:0a:e8:53:0b:f7:
         c8:05:77:82:fb:b1:d4:e1:25:52:52:d4:4d:df:9b:9e:43:43:
         6b:09:96:4d:49:74:73:3c:62:8a:83:19:fa:48:a4:43:29:96:
         22:83:6d:3f:28:6c:69:b4:b7:23:d9:98:99:b7:7b:6e:c9:15:
         c3:59:46:ba:8d:c5:c3:c3:b9:e0:57:16:0d:86:55:94:ca:23:
         57:a0:b1:fd:cb:9d:61:fb:b5:fb:8e:55:bd:92:d1:6e:ab:5f:
         8b:86:c4:be:50:dc:b1:44:2b:9a:43:24:0c:d4:b7:58:63:78:
         24:88:26:cf:16:4b:4b:b9:65:75:0b:b3:99:b9:fb:d3:24:5d:
         90:1e:2f:6a:61:dc:e1:b0:3b:d6:b3:e5:e1:43:3c:27:89:ef:
         4d:7c:52:80:bc:d7:7a:e0:49:42:b1:5c:6d:75:b6:77:80:94:
         69:4d:bc:34:cc:87:1c:15:16:df:00:78:6a:70:90:6c:a1:05:
         c7:0b:22:8a:cb:48:8c:9e:24:90:49:f2:16:93:6a:3b:d0:a8:
         03:f7:03:24:b9:d8:36:00:92:31:05:75:b0:18:74:2e:0e:a8:
         06:65:f1:76:94:ed:a9:89:1b:1e:94:c4:0d:2e:ea:63:34:2c:
         c4:07:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:55 2026 by rpki-client